You would need to block outbound access of port 80 and 443 TCP at least.
That could be done with a personal firewall [not the Windows Firewall] ,
with an ipsec filtering policy, or at your perimeter firewall if it can
manage outbound access using the IP address on the computer in question as
the source IP. For perimeter firewall to work the computer would need to
have a static IP address and the users would ideally not be local
administrators. Zone Alarm is fairly easy Software Firewall to setup and the
link below is a primer on ipsec filtering. There are also software
firewalls that can have different settings for users such as PortsLock.---
Steve

http://www.securityfocus.com/infocus/1559 --- ipsec filtering basics.
http://www.portslock.com/ -- PortsLock

"HME" <helassaad@comcast.net> wrote in message
news:HdmdnZUhQeDpyOzenZ2dnUVZ_sKdnZ2d@comcast.com. ..
> is there a way to stop users from accessing the internet on a windows XP
> pro
> machine other than setting a fake proxy? I would like not only to stop
> Internet explorer from running, but also to stop the user from typing a
> URL
> at a folder navigation and get to the internet.
>
> Thanks.
>
> hme
>
> --
>
>
> ---------------------------------------------------------------------
> "Are you still wasting your time with spam?...
> There is a solution!"
>
> Protected by GIANT Company's Spam Inspector
> The most powerful anti-spam software available.
> http://mail.spaminspector.com
>
>
>